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Abstract 



We show that any quantum algorithm deciding whether an input function / from [n] to [n] is 2-to- 1 
or almost 2-to-l requires 0(n) queries to /. The same lower bound holds for determining whether or 
not a function / from [2n — 2] to [n] is surjective. These results yield a nearly linear 0(n/ logn) lower 
bound on the quantum query complexity of AC . The best previous lower bound known for any AC 
function was the f2((n/logn) 2 / 3 ) bound given by Aaronson and Shi's 57(n 2 / 3 ) lower bound for the 
element distinctness problem (TJ. 
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1 Introduction 



We study the quantum query complexity of Boolean functions that are computable with constant-depth 
polynomial-size circuits. The quantum query complexity of a function is the maximum number of queries a 
quantum algorithm needs to make to its input in order to evaluate the function (either with certainty, or with 
probability bounded away from 1/2 as we consider here). Both Boolean queries and ra-ary queries can be 
natural depending on the context. 

Starting with Graver's 0(y/n) quantum query algorithm for computing the OR of n bits, and continuing 
through recent work on read-once formula evaluation |[T2"l l7l[T6ll6ll. quantum query algorithms have been 
shown to provide polynomial speed-ups over classical query algorithms for computing many total functions. 

At the same time, three main techniques have been developed to derive lower bounds on quantum query 
complexity. The first two are the polynomial method of Beals et al. |E1 and the adversary method introduced 
by Ambainis GICGO. The polynomial method uses the fact that the probability of a quantum algorithm suc- 
ceeding is an approximating polynomial for the function that it is computing. On the other hand, Ambainis' 
adversary method is based on tracking the state of the quantum algorithm on "difficult" inputs. In a recent 
body of work lPT3l [T71 [T8l [131 . the adversary method was extended to characterize the query complexity 
of Boolean functions and of functions defined on large alphabets. This can formulated as a version of the 
adversary method that includes negative weights [13 ] (positive weights do not help), as a certain measure on 
span programs computing the function ifTTl . or as the optimum of a semi-definite program maximizing the 
spectral norm of the various adversary matrices of the function 0~8][l5j. An adversary matrix of a function 
is a real symmetric matrix indexed by pairs of inputs such that if the function evaluates to the same value on 
a pair of inputs, then the corresponding entry in the adversary matrix is set to 0. Our proof uses the original 
adversary method JH and does not require the machinery developed in the subsequent work. 

The methods above have been used to show that some fairly simple functions do not benefit from sig- 
nificant improvement in query complexity using quantum queries. For example, since the parity of n bits 
requires degree f2(n) to be approximated by a multivariate polynomial its quantum query complexity also 
must be linear. However, parity is still a somewhat complex function since it cannot even be approximated 
in AC , the class of decision problems solvable by Boolean circuits with unbounded fan-in, constant depth, 
and polynomial size. Can the simple functions in AC always be computed using O(n^) queries for some 
(3 < 1? We show that this is not the case. 

The quantum query complexity of a number of problems in AC has been thoroughly investigated. The 
first quantum query lower bounds in OISI showed that Graver's algorithm for the OR is asymptotically op- 
timal. In [21, Ambainis used the adversary method to prove an ^}(^/n) lower bound on the query complexity 
of an AND of ORs. Motivated in part by questions of the security of classical cryptographic constructions 
with respect to quantum adversaries, the collision problem of determining whether a function is 1-to-l or 
2-to-l on its domain has been one of the most celebrated examples in quantum query complexity. Aaronson 
and Shi CQ proved an Sl(n 1//3 ) lower bound on the query complexity of the collision problem with range 
3n/2, which yields an il(n 2 / 3 ) lower bound on the element distinctness problem with range 0(n 2 ). The el- 
ement distinctness problem is equivalent to the general case of testing whether a function is 1-to-l (without 
the promise of being 2-to-l in case that it is not 1-to-l). For the r-to-1 versus 1-to-l problem, for integer 
r > 2, Aaronson and Shi also proved a lower bound of f2((n/r) 1//3 ) when the range size is 3n/2. All of 
these problems can be computed in AC and these query complexities are asymptotically optimal by results 
of Brassard et al. iTTOTl and Ambainis [5 ]. Ambainis also was able to reduce the range size requirement for 
both lower bounds [3], as was Kutin [ 14] for the collision problem, independently, by different means. 
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The original adversary method has also been used to prove lower bounds for related search problems. 
In ifTTTl . the authors give an Q(n) lower bound for the query complexities of a variety of problems where the 
goal is to produce a non-Boolean output, for example the index of some non-colliding input assuming that 
one exists. 

In the original collision problem, the main question was whether or not the input function is 1-to-l, 
where at most O^n 1 ^) queries suffice for the promise versions of the problem and at most 0(n 2 / 3 ) queries 
suffice even in the general case. We show that if one is concerned with whether or not a function is precisely 
2-to-l, the number of queries required is substantially larger. More precisely, we show an asymptotically 
tight linear lower bound for determining whether or not a function is either precisely 2-to-l or almost 2-to-l 
in that the function is 2-to-l except for exactly two inputs that are mapped 1-to-l. This also implies an 
f2(n/ log n) lower bound on the Boolean quantum query complexity of AC , thus substantially improving 
the previous best lower bound of tt((n/ log n) 2//3 ) given by the results of Aaronson and Shi. 

Using the original adversary method developed by Ambainis [2] we prove the following theorem: 

Theorem 1. Let nbe a positive even integer, T be the set of functions f from [n] to [n] that are either 2-to-l 
or almost 2-to-l and (f> : J- — > {0, 1} be a Boolean function on T such that 4>(f) = 1 iff f is 2-to-l. Then 
any quantum algorithm deciding (f) requires f2(n) queries. 

Noting that determining whether or not a function from [2n — 2] to [n] is surjective has as a special case 
the problem of determining whether a function is a 2-to-l or almost 2-to-l function, we obtain the following 
lower bound. 

Corollary 2. Let nbe a positive even integer and Q be the set of functions from [2n — 2] to [n]. Define the 
function ONTO : Q — > {0, 1} by ONTO(/) = 1 if and only if f is surjective. Then any quantum algorithm 
computing ONTO with probability at least 2/3 requires f2(n) queries. 

Since each value f(i) can be encoded using log 2 n bits, the entire input is n log 2 n bits long. It is easy 
to see that determining whether such a function given by these bits is 2-to-l or not is a simple AC problem. 
Since each query of one of the bits of f(i) is weaker than querying all of f(i), we immediately obtain lower 
bounds on the query complexity of AC . 

Corollary 3. The quantum query complexity of AC is Q(n/ logn). 

2 Lower bounds on quantum query complexity 

Let n be a positive even integer and / : [n] — > [n'\ for n' > n/2 be a function. We say that / is 2-to-l if 
every point in the image either has exactly two pre-images or has no pre-images in [n] . We say / is almost 
2-to-l if / is 2-to-l on n — 2 points in the domain and 1-to-l on the remaining 2 points, and every point has 
at most two pre-images. 

We consider the following problem: 

2-TO-1-VS-ALMOST-2-TO-1 Problem: Given a positive even integer n, integer n' > n/2 + 1, and a 
function / : [n] — > [n 1 ] that is either 2-to-l or almost 2-to-l, determine whether / is 2-to-l. 

The function / : [n] — > [n'\ is given to us as a quantum oracle query which we can assume without 
loss of generality is accessed using a special register i with answer register j. The oracle replaces a basis 
state \i, j, ^) by |i, (f(i) + j) mod n', The quantum query complexity of / is the minimum number 
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of queries needed by the quantum algorithm to correctly determine with probability at least 2/3 whether / 
is 2-to- 1 or almost 2-to- 1 . 

We will use the adversary method as developed by Ambainis to derive lower bounds on the quantum 
query complexity of Boolean functions. 

Theorem 4 (Ambainis J2]]). Let F be the set of functions f from [n] to [n'\ and (ft : T — > {0,1} be a Boolean 
function. Let A and B be two subsets of J- such that (ft(f) ^ <ft{g) if f £ A and g £ B. If there exists a 
relation R C A x B such that: 

1. For every f £ A, there exist at least m different functions g £ B such that (/, g) £ R. 

2. For every g £ B, there exist at least m! different functions f £ A such that (/, g) £ R. 

3. For every x £ [n] and f £ A, there exist at most I different functions g £ B such that (/, g) £ R and 
f(x) / g{x). 

4. For every x £ [n] and g £ B, there exist at most I' different functions f £ A such that (f,g) £ R and 
f(x) / g(x). 



Then any quantum algorithm computing (ft with probability at least 2/3 requires £1 




queries. 



Let J 7 be the set of functions from [n] to [re'] that are either 2-to-l or almost 2-to-l and let (ft : T — > {0, 1} 
be a Boolean function such that <p(f) = 1 if and only if / is 2-to-l. We prove, using the adversary method 
[2], that the quantum query complexity of (ft is £l{n). 

2.1 Quantum query lower bounds for the 2-to- 1 - vs- almost-2-to- 1 and onto functions 

Theorem 5. Let re be a positive even integer, n' > n/2 + 1, and J- be the set of functions f from [n] to [n'] 
that are either 2-to-l or almost 2-to-l. Let (ft : T — > {0, 1} be a Boolean function such that (ft(f) = 1 iff f 
is 2-to-l. Then any quantum algorithm computing (ft with probability at least 2/3 requires O(n) queries. 

Proof. We use the adversary method. Let A be the set of functions in F that are 2-to- 1 and B be the set of 
functions that are almost 2-to-l. Obviously, (ft(A) = 1 and (ft(B) = 0. We denote the distance between two 
functions / and g by 

d(f,g) = \{i£[n]\f(i)^g(i)J,g£F}\. 

For a function g £ B, we denote the two input points in [n] that g maps injectively by s(g) = {s±, S2} 
where si < S2. That is, g(s\) ^ g{s2) and g(i) £~ {g(si),g(s2)} for all i s(g). Consider the following 
relation R C A x B: 

R = {(f,g)J £A,g£ B,d(f,g) = 2,/( Sl ) = g( Sl ) and f(s 2 ) = g(s 2 )}. 

In other words, the relation consists of pairs of functions in A x B that differ on exactly 2 points, neither of 
which is one of the injectively mapped points of the function in B. 

Claim 6. If (/, g) £ R and x, y ^ s(g) = {s±, S2} where x 7^ y are the points where f and g differ then 
if{x),f{y)} = {g{si),g{s 2 )} andg{x) = g{y). 
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Since /(si) = g(si) / g(s 2 ) = f(s 2 ), and g(i) (/ {g(si),g(s 2 )} for every i $ s(g), we must have 
{f(x), f(y)} = {g(si), g(s 2 )}, otherwise / will not pair any input with si or s 2 and hence not be 2-to-l. 
Since x, y ^ s(g), it must be that x and y are paired inputs of g. However, since / is 2-to-l and pairs up 
the four points {x, y, s\,s 2 } all other points must be paired with each other by both / and g since g agrees 
with / on these other points. Hence the only points to which x and y can be paired by g are each other, and 
therefore g{x) = g(y). The claim follows. 

We now check the four properties of R: 

1. Let / be a 2-to-l function in A. Choose any two points x, y G [n] such that f(x) / f{y)- For each of 
the n' — n/2 points z G [n'\ not in the image of / we can define an almost 2-to-l function g G B such 
that (/, g) G R by having g agree with / on all but inputs {x, y} and setting g(x) = g(y) = z. There 
are n(n — 2) /2 choices of the pair of x and y and n' — n/2 choices of z, each of which produces a 
distinct g, for a total of m = n(n — 2)(2n' — n)/4 distinct g G B with (/, g) G R. 

2. Let <7 be an almost 2-to-l function in B. Choose some ordered pair of inputs (x, y) ^ s(g) such that 
5 r ( s i) / 9{ x ) = / 5'( s 2)- Define a 2-to-l function / G A such that (/, g) G R as follows: 
Let / agree with g on all inputs outside {x, y}. Define f(x) = g(si) and f(y) = g(s 2 ). There are 
m' = n — 2 choices of the ordered pair (x, y) since there n/2 — 1 pairs of matched inputs for g and 2 
ways to order each pair. 

3. Fix a function / G A and a point x G [n\. Let g G B be such that (/, g) £ R and /(x) / <7(x). Then 
/ and g should differ an another point y G [n]. By the claim, f(x) / f(y) and = ^(y). There 
are precisely n — 2 choices of y. For each choice of y, the choice of g is determined by the value 
z = g(x) = g(y) which must not be in the image of /. (Indeed each such choice yields such a valid g.) 
Hence there are precisely n' — n/2 choices of z. So, in total there are precisely I = (n — 2) (2n' — n)/2 
choices of g with (/, g) G R and f(x) / g(x). 

4. Fix a function g G B and a point x G [n]. Let / G A be such that (/, g) G R and f(x) / g(x). 
Then / and g should differ on another point y G [n]. (We must have x ^ s(g), otherwise there is 
no such /.) By the claim we must have g(x) = g(y). Therefore there is only one such choice for y. 
Moreover by the claim we must have {f(x), f(y)} = {/(si), f{s 2 )} which yields precisely V = 2 
such functions /. 

It follows that ™l™L = y/ n (n — 2)/2. Therefore the quantum query complexity of (f> is f2(n). □ 

If n' = n/2 + 1 then observe that any almost 2-to-l function is surjective but any 2-to-l function is not. 
Therefore since n = 2n' — 2 we immediately obtain the following Corollary. 

Corollary 7. Let n be a positive even integer and Q be the set of functions from [2n — 2] to [n]. Define the 
function ONTO : Q — > {0, 1} by ONTO(/) = 1 if and only if f is surjective. Then any quantum algorithm 
computing ONTO with probability at least 2/3 requires Q(n) queries. 

2.2 A near optimal query lower bound for AC 

Corollary 8. AC has worst-case quantum query complexity Q(N/ log N) on N -bit functions. 
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Proof. The lower bound in Theorem[5]is an asymptotically optimal Q(n) for the 2-to-l versus almost 2-to-l 
problem. Even the total function <fi which takes as input an arbitrary function / : [n] — > [n] and determines 
whether or not it is 2-to-l can be computed in AC : 

We represent the input / : [n] — > [n] by N = n log 2 n bits, where represents the ^-th bit of f(i). The 
following is an explicit polynomial-size constant-depth formula that computes <fi: 

log 2 n— 1 

AV A [(-■/« v fit) A hfa v /«)] 

t j^i £=0 

log 2 n-1 

A A V A V A M V A fa) V (-./# A / w ) V A /«) V A /#)] . 

i^j^k^i 1=0 

The first part of the formula computes whether for each input i there is some input j ^ i such that all bits 
of f(i) and /(j) agree and the second part determines whether for each triple of distinct inputs there is 
some bit on which some pair of f(i), f(j), f(k) disagree. This unbounded fan-in formula clearly has size 
0(n 3 log n) and is depth 4 given its input literals. The lower bound of O(n) from Theorem[5]is Cl(N/ log N) 
as required. 

We note that a similar result holds based on the ONTO function which has an even smaller AC formula: 

log 2 n— 1 

A V A Ht 

j£[n]ie[2n-2] 1=0 

Where ji is the £-th bit of the binary encoding of j, and x^ e is x if jg = 1 and ->x if je = 0. This formula is 
only depth 3 and size 0(n 2 log n). □ 

It is interesting to note the importance of the domain size in this problem. Testing surjectivity for 
functions from [n] to [n] is equivalent to testing whether two elements from the domain are mapped to the 
same point in the range and thus has query complexity ©(n 2 / 3 ), given by the element distinctness problem 

ni. 

3 Discussion 

While we have shown that there is a function 4> : [n] n ->■ {0, 1} in AC requiring linear quantum query 
complexity, when this is encoded using Boolean inputs it requires O(nlogn) bits and thus the quantum 
query lower bound is lower than the number of input bits by an 0(log n) factor. (Note that this lower bound 
holds even when the query algorithm is able to read the group of log 2 n bits surrounding each query bit at 
no extra cost.) This does rule out a polynomial speed-up but it would be nice to obtain a linear lower bound 
for the Boolean case. 

Also, our results do nothing to close the gap in the lower bound on the approximate degree of AC func- 
tions. In [4J, Ambainis used a standard recursive construction to obtain a Boolean function with quantum 
query complexity larger than its approximate degree by a small polynomial amount, thus giving a separation 
between query complexity and approximate degree. Determining the approximate degree of the 2-TO-l- 
VS-ALMOST-2-TO- 1 or ONTO functions, would yield either a much larger degree lower bound for AC or a 
much larger gap between approximate degree and quantum query complexity than is currently known. 
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